CVE-2020-13790
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in...
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
- Record
CVE-2020-13790- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H - CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
- Record
CVE-2020-13790- Updated
- 2026-11-02
EUVDEUVD-2020-6006 No score
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
- Record
EUVD-2020-6006- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3rgw-2fpg-85mq No score
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in...
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
- Record
GHSA-3rgw-2fpg-85mq- Updated
- 2026-11-02
OSVALPINE-CVE-2020-13790
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
- Record
ALPINE-CVE-2020-13790- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2020-13790
CVE-2020-13790 does not affect BellSoft software
- Record
BELL-CVE-2020-13790- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
Show 13 moreShow less
OSV
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
- Record
CVE-2020-13790- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-13790
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
- Record
DEBIAN-CVE-2020-13790- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:7540
Red Hat Security Advisory: libjpeg-turbo security update
- Record
RHSA-2025:7540- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2025:7540
Moderate: libjpeg-turbo security update
The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.
Security Fix(es):
- libjpeg-turbo: heap-based buffer over-read in get_rgb_row() in rdppm.c (CVE-2020-13790)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:7540- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-13790
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
- Record
UBUNTU-CVE-2020-13790- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2025:7540 No score
Moderate: libjpeg-turbo security update
The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.
Security Fix(es):
- libjpeg-turbo: heap-based buffer over-read in get_rgb_row() in rdppm.c (CVE-2020-13790)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:7540- Updated
- 2026-11-02
OSVMGASA-2020-0267 No score
Updated libjpeg packages fix security vulnerability
Updated libjpeg packages fix security vulnerability:
libjpeg-turbo 2.0.4 has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file (CVE-2020-13790).
- Record
MGASA-2020-0267- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:1413-1 No score
Security update for libjpeg-turbo
This update for libjpeg-turbo fixes the following issues:
- CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file (bsc#1172491).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:1413-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:1458-1 No score
Security update for libjpeg-turbo
This update for libjpeg-turbo fixes the following issues:
- CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file (bsc#1172491).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:1458-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10952-1 No score
libjpeg-turbo-2.1.1-65.2 on GA media
These are all security issues fixed in the libjpeg-turbo-2.1.1-65.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10952-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:2569-1 No score
Security update for libjpeg-turbo
This update for libjpeg-turbo fixes the following issues:
- CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file (bsc#1172491).
- Record
SUSE-SU-2020:2569-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:2570-1 No score
Security update for libjpeg-turbo
This update for libjpeg-turbo fixes the following issues:
- CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file (bsc#1172491).
- Record
SUSE-SU-2020:2570-1- Updated
- 2026-11-02
OSVUSN-4386-1 No score
libjpeg-turbo vulnerability
It was discovered that libjpeg-turbo incorrectly handled certain PPM files. An attacker could possibly use this issue to access sensitive information.
- Record
USN-4386-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libjpeg-turboAlpine:v3.10 |
before 2.0.4-r1 | 2.0.4-r1 |
libjpeg-turboAlpine:v3.11 |
before 2.0.4-r1 | 2.0.4-r1 |
libjpeg-turboAlpine:v3.12 |
before 2.0.4-r2 | 2.0.4-r2 |
libjpeg-turboAlpine:v3.13 |
before 2.0.4-r2 | 2.0.4-r2 |
libjpeg-turboAlpine:v3.14 |
before 2.0.4-r2 | 2.0.4-r2 |
libjpeg-turboAlpine:v3.15 |
before 2.0.4-r2 | 2.0.4-r2 |
libjpeg-turboAlpine:v3.16 |
before 2.0.4-r2 | 2.0.4-r2 |
libjpeg-turboAlpine:v3.17 |
before 2.0.4-r2 | 2.0.4-r2 |
libjpeg-turboAlpine:v3.18 |
before 2.0.4-r2 | 2.0.4-r2 |
libjpeg-turboAlpine:v3.19 |
before 2.0.4-r2 | 2.0.4-r2 |
Show 52 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libjpeg-turboAlpine:v3.20 |
before 2.0.4-r2 | 2.0.4-r2 |
libjpeg-turboAlpine:v3.21 |
before 2.0.4-r2 | 2.0.4-r2 |
libjpeg-turboAlpine:v3.22 |
before 2.0.4-r2 | 2.0.4-r2 |
libjpeg-turboAlpine:v3.23 |
before 2.0.4-r2 | 2.0.4-r2 |
libjpeg-turboAlpine:v3.24 |
before 2.0.4-r2 | 2.0.4-r2 |
libjpeg-turboAlmaLinux:8 |
before 1.5.3-14.el8_10 | 1.5.3-14.el8_10 |
libjpeg-turbo-develAlmaLinux:8 |
before 1.5.3-14.el8_10 | 1.5.3-14.el8_10 |
libjpeg-turbo-utilsAlmaLinux:8 |
before 1.5.3-14.el8_10 | 1.5.3-14.el8_10 |
turbojpegAlmaLinux:8 |
before 1.5.3-14.el8_10 | 1.5.3-14.el8_10 |
turbojpeg-develAlmaLinux:8 |
before 1.5.3-14.el8_10 | 1.5.3-14.el8_10 |
libjpeg-turboDebian:12 |
before 1:2.0.5-1 | 1:2.0.5-1 |
libjpeg-turboDebian:13 |
before 1:2.0.5-1 | 1:2.0.5-1 |
libjpeg-turboDebian:14 |
before 1:2.0.5-1 | 1:2.0.5-1 |
libjpeg-turboDebian:9 From an advisory covering 4 CVEs |
before 1:1.5.1-2+deb9u1, plus listed versions 1:1.5.1-2 |
1:1.5.1-2+deb9u1 |
libjpegMageia:7 |
before 2.0.4-1.1.mga7 | 2.0.4-1.1.mga7 |
libjpeg-turboRed Hat:enterprise_linux:8::appstream |
before 0:1.5.3-14.el8_10 | 0:1.5.3-14.el8_10 |
libjpeg-turbo-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:1.5.3-14.el8_10 | 0:1.5.3-14.el8_10 |
libjpeg-turbo-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:1.5.3-14.el8_10 | 0:1.5.3-14.el8_10 |
libjpeg-turbo-develRed Hat:enterprise_linux:8::appstream |
before 0:1.5.3-14.el8_10 | 0:1.5.3-14.el8_10 |
libjpeg-turbo-utilsRed Hat:enterprise_linux:8::appstream |
before 0:1.5.3-14.el8_10 | 0:1.5.3-14.el8_10 |
libjpeg-turbo-utils-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:1.5.3-14.el8_10 | 0:1.5.3-14.el8_10 |
turbojpegRed Hat:enterprise_linux:8::appstream |
before 0:1.5.3-14.el8_10 | 0:1.5.3-14.el8_10 |
turbojpeg-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:1.5.3-14.el8_10 | 0:1.5.3-14.el8_10 |
libjpeg-turbo-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:1.5.3-14.el8_10 | 0:1.5.3-14.el8_10 |
libjpeg-turbo-debugsourceRed Hat:enterprise_linux:8::crb |
before 0:1.5.3-14.el8_10 | 0:1.5.3-14.el8_10 |
libjpeg-turbo-utils-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:1.5.3-14.el8_10 | 0:1.5.3-14.el8_10 |
turbojpeg-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:1.5.3-14.el8_10 | 0:1.5.3-14.el8_10 |
turbojpeg-develRed Hat:enterprise_linux:8::crb |
before 0:1.5.3-14.el8_10 | 0:1.5.3-14.el8_10 |
libjpeg-turboRocky Linux:8 |
before 0:1.5.3-14.el8_10 | 0:1.5.3-14.el8_10 |
libjpeg-turboSUSE:Linux Enterprise Module for Basesystem 15 SP1 |
before 1.5.3-5.15.7 | 1.5.3-5.15.7 |
libjpeg62-turboSUSE:Linux Enterprise Module for Basesystem 15 SP1 |
before 1.5.3-5.15.7 | 1.5.3-5.15.7 |
libjpeg-turboSUSE:Linux Enterprise Module for Basesystem 15 SP2 |
before 1.5.3-5.15.7 | 1.5.3-5.15.7 |
libjpeg62-turboSUSE:Linux Enterprise Module for Basesystem 15 SP2 |
before 1.5.3-5.15.7 | 1.5.3-5.15.7 |
libjpeg-turboSUSE:Linux Enterprise Module for Desktop Applications 15 SP1 |
before 1.5.3-5.15.7 | 1.5.3-5.15.7 |
libjpeg-turboSUSE:Linux Enterprise Module for Desktop Applications 15 SP2 |
before 1.5.3-5.15.7 | 1.5.3-5.15.7 |
libjpeg-turboSUSE:Linux Enterprise Module for Package Hub 15 SP1 |
before 1.5.3-5.15.7 | 1.5.3-5.15.7 |
libjpeg-turboSUSE:Linux Enterprise Module for Package Hub 15 SP2 |
before 1.5.3-5.15.7 | 1.5.3-5.15.7 |
libjpeg-turboSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.5.3-31.22.2 | 1.5.3-31.22.2 |
libjpeg62-turboSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.5.3-31.22.2 | 1.5.3-31.22.2 |
libjpeg-turboSUSE:Linux Enterprise Server 12 SP5 |
before 1.5.3-31.22.2 | 1.5.3-31.22.2 |
libjpeg62-turboSUSE:Linux Enterprise Server 12 SP5 |
before 1.5.3-31.22.2 | 1.5.3-31.22.2 |
libjpeg-turboSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.5.3-31.22.2 | 1.5.3-31.22.2 |
libjpeg62-turboSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.5.3-31.22.2 | 1.5.3-31.22.2 |
libjpeg-turboUbuntu:Pro:14.04:LTS |
before 1.3.0-0ubuntu2.1+esm1, plus listed versions 1.3.0-0ubuntu11.3.0-0ubuntu21.3.0-0ubuntu2.1 |
1.3.0-0ubuntu2.1+esm1 |
libjpeg-turboUbuntu:16.04:LTS |
before 1.4.2-0ubuntu3.4, plus listed versions 1.3.0-0ubuntu21.4.2-0ubuntu11.4.2-0ubuntu21.4.2-0ubuntu31.4.2-0ubuntu3.11.4.2-0ubuntu3.3 |
1.4.2-0ubuntu3.4 |
libjpeg-turboUbuntu:18.04:LTS |
before 1.5.2-0ubuntu5.18.04.4, plus listed versions 1.5.2-0ubuntu51.5.2-0ubuntu5.18.04.11.5.2-0ubuntu5.18.04.3 |
1.5.2-0ubuntu5.18.04.4 |
libjpeg-turboUbuntu:20.04:LTS |
before 2.0.3-0ubuntu1.20.04.1, plus listed versions 2.0.3-0ubuntu1 |
2.0.3-0ubuntu1.20.04.1 |
libjpeg-turboopenSUSE:Leap 15.1 |
before 1.5.3-lp151.6.6.1 | 1.5.3-lp151.6.6.1 |
libjpeg62-turboopenSUSE:Leap 15.1 |
before 1.5.3-lp151.6.6.1 | 1.5.3-lp151.6.6.1 |
libjpeg-turboopenSUSE:Leap 15.2 |
before 1.5.3-lp152.8.3.1 | 1.5.3-lp152.8.3.1 |
libjpeg62-turboopenSUSE:Leap 15.2 |
before 1.5.3-lp152.8.3.1 | 1.5.3-lp152.8.3.1 |
libjpeg-turboopenSUSE:Tumbleweed From an advisory covering 7 CVEs |
before 8.2.2-65.2 | 8.2.2-65.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-13790 is a high vulnerability (CVSS 8.1) in Libjpeg-turbo, published June 3, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.18%, the 88th percentile. Fixed in libjpeg-turbo 2.0.4-r1.
References
github.com/libjpeg-turbo/libjpeg-turbo/issues/433
usn.ubuntu.com/4386-1
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P4D6KNUY7YANSPH7SVQ44PJKSABFKAUB
lists.debian.org/debian-lts-announce/2020/07/msg00033.html
Show 36 moreShow less
lists.opensuse.org/opensuse-security-announce/2020-09/msg00031.html
security.gentoo.org/glsa/202010-03
nvd.nist.gov/vuln/detail/CVE-2020-13790
security.alpinelinux.org/vuln/CVE-2020-13790
access.redhat.com/errata/RHSA-2025:7540
bugzilla.redhat.com/1847155
errata.almalinux.org/8/ALSA-2025-7540.html
docs.bell-sw.com/security/cves/CVE-2020-13790
security-tracker.debian.org/tracker/CVE-2020-13790
advisories.mageia.org/MGASA-2020-0267.html
bugs.mageia.org/show_bug.cgi?id=26784
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7540.json
cve.org/CVERecord?id=CVE-2020-13790
errata.rockylinux.org/RLSA-2025:7540
suse.com/support/update/announcement/2020/suse-su-20202569-1
bugzilla.suse.com/1172491
ubuntu.com/security/CVE-2020-13790